18 April 2011

15 results · Feed

• Unscored —
  CVE-2011-0286

  Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research …

  Apr 18, 2011
• Unscored —
  CVE-2011-1496 Public exploit

  tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a …

  tmux Debian
  Apr 18, 2011
• Unscored —
  CVE-2011-1426

  The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlay…

  Apr 18, 2011
• Unscored —
  CVE-2011-1715 Public exploit

  Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other…

  Apr 18, 2011
• Unscored —
  CVE-2011-1518

  Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x be…

  otrs2 Debian
  Apr 18, 2011
• Medium —
  CVE-2011-1714 Public exploit

  QooxDoo XSS in Callback Parameter

  Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or H…

  qooxdoo npm
  Apr 18, 2011
• Unscored —
  CVE-2011-1717

  Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which …

  Apr 18, 2011
• Unscored —
  CVE-2011-1716

  Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to injec…

  xymon Debian
  Apr 18, 2011
• Unscored —
  CVE-2011-1168

  Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in K…

  Apr 18, 2011
• Unscored —
  CVE-2010-4229 EPSS 25%

  Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZA…

  Apr 18, 2011
• Unscored —
  CVE-2011-0988

  pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when r…

  Apr 18, 2011
• Unscored —
  CVE-2011-0012

  The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitr…

  Apr 18, 2011
• Unscored —
  CVE-2011-1179

  The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a den…

  Apr 18, 2011
• Unscored —
  CVE-2010-1171

  Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticate…

  Apr 18, 2011
• Unscored —
  CVE-2009-0788

  Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote atta…

  Apr 18, 2011